CVE-2001-1247

MediumCVSS 6.4/10Last modified Jun 16, 2026

Description

PHP 4.0.4pl1 and 4.0.5 in safe mode allows remote attackers to read and write files owned by the web server UID by uploading a PHP script that uses the error_log function to access the files.

Metrics

CVSS 2.0 6.4/10AV:N/AC:L/Au:N/C:P/I:P/A:N

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://online.securityfocus.com/archive/1/194425Exploit, Patch, Vendor Advisory
http://www.osvdb.org/5440
http://www.php.net/do_download.php?download_file=php-4.1.2.tar.gz
http://www.redhat.com/support/errata/RHSA-2002-035.htmlPatch, Vendor Advisory
http://online.securityfocus.com/archive/1/194425Exploit, Patch, Vendor Advisory
http://www.osvdb.org/5440
http://www.php.net/do_download.php?download_file=php-4.1.2.tar.gz
http://www.redhat.com/support/errata/RHSA-2002-035.htmlPatch, Vendor Advisory

Timeline

Published: Dec 6, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-12485.0vWebServer 1.2.0 allows remote attackers to view arbitrary ASP scripts via a request for an ASP script that ends with a URL-encoded space ch CVE-2001-12495.0vWebServer 1.2.0 allows remote attackers to cause a denial of service via a URL that contains MS-DOS device names.CVE-2001-12505.0vWebServer 1.2.0 allows remote attackers to cause a denial of service (hang) via a small number of long URL requests, possibly due to a buff CVE-2001-12515.0SmallHTTP 1.204 through 3.00 beta 8 allows remote attackers to cause a denial of service via multiple long URL requests.CVE-2001-125210.0Network Associates PGP Keyserver 7.0 allows remote attackers to bypass authentication and access the administrative web interface via URLs t CVE-2001-12534.6Alexis 2.0 and 2.1 in COM2001 InternetPBX stores voicemail passwords in plain text in the com2001.ini file, which could allow local users to CVE-2001-12547.5Web Access component for COM2001 Alexis 2.0 and 2.1 in InternetPBX sends username and voice mail passwords in the clear via a Java applet th CVE-2001-12554.6WinMySQLadmin 1.1 stores the MySQL password in plain text in the my.ini file, which allows local users to obtain unathorized access the MySQ CVE-2001-12561.2kmmodreg in HP-UX 11.11, 11.04 and 11.00 allows local users to create arbitrary world-writeable files via a symlink attack on the (1) /tmp/.CVE-2001-12577.5Cross-site scripting vulnerability in Horde Internet Messaging Program (IMP) before 2.2.6 and 1.2.6 allows remote attackers to execute arbit CVE-2001-12583.6Horde Internet Messaging Program (IMP) before 2.2.6 allows local users to read IMP configuration files and steal the Horde database password CVE-2001-12595.0Avaya Argent Office allows remote attackers to cause a denial of service by sending UDP packets to port 53 with no payload.